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METHOD AND SYSTEM FOR ENCODING IMAGES USING 
ENCODING PARAMETERS FROM MULTIPLE SOURCES 

FIELD OF THE INVENTION 

[0001] The invention relates generally to the field of counterfeit protection, and more 
particularly to the field of electronic and printed document protection through the use of an 
encoded image. 

BACKGROUND OF THE INVENTION 

[0002] An emerging trend in the increasingly electronic business world is using the world 
wide web and email to provide up-to-the-minute business documents to customers and other end 
users. Automated document generation and electronic distribution, such as using email or web 
services has many advantages. It significantly reduces costs associated with preprinting forms, 
document archiving, mailing, handling etc. It gives line-of-business users access to important 
data instantly and makes documents available to the customers at all times, around-the-clock. 
However, certain drawbacks are present with electronic documents, including the potential for 
tampering or creation of fraudulent documents that in most or all aspects resemble the original. 

[0003] Many software tools have been suggested to protect the integrity and confidentiality 
of electronic documents. These tools, such as plug-ins, may give broad control to adding or 
changing notes and form fields in the electronic document, document encryption, as well as 
adding digital signatures to the documents. 

[0004] A significant drawback in the protective measures typically used to protect 
documents provided in electronic format is that these measures are often useless once the 
document is transferred to a printed media. Further, typical hard copy protective measures may 
not be available to the recipient of the electronic document. For example, security ink or secure 
paper may be available to the document creator but not to the recipient of an electronically 
transmitted document. Clearly, maintaining the security of hard copies of electronically 
transmitted copies is problematic when the document creator has no control over the printing 
process. Furthermore, many desktop image-editing software tools can be used to create 
counterfeit print-outs of even complex electronic documents. Printed documents are still widely 
used in many aspects of daily life, including business and government settings. 
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[0005] Widely used protection methods for deterring digital counterfeiting and identifying 
data alterations include bar codes and digital watermarking. These are usually added as an image 
file into a document by the originating party. However, bar-code generation software is widely 
available and can be used by a counterfeiter to create fraudulent documents. 

[0006] Digital watermarking has also been proposed as a solution, but tests have shown that 
it may lack the reliability necessary for consistent and widespread use. Further, implementing 
such technology is often expensive, with equipment costs for the necessary hardware and 
software sometimes canceling the cost savings achieved through electronic document 
distribution. The amount of information that can be protected may often be limited to just 
several digits or letters. These problems put a severe constraint on reliability and usage of 
electronic documents in commerce and services. 

SUMMARY OF THE INVENTION 

[0007] Accordingly, there is a need to provide a method of protecting documents in 
electronic form that maintains resistance to counterfeiting after the document has been printed. 
Further, it is highly desirable to provide a protection methodology that provides levels and 
degrees of protection based on a combination of data that is within the control of the document 
generator or user and data that is not within the control of the document generator or user. 

[0008] An illustrative aspect of the invention provides an automated method of producing an 
encoded image for use in authenticating a printed version of a digital document. The method 
comprises establishing at least one digitized authentication image, receiving at least one user- 
supplied encoding parameter, and determining at least one non-user-supplied encoding 
parameter. The method further comprises establishing a first encoding parameter set including 
the at least one user-supplied encoding parameter and the at least one non-user-supplied 
encoding parameter. The first encoding parameter set is usable to encode one or more of the at 
least one digitized authentication image. The method also comprises encoding one or more of 
the at least one digitized authentication image using the first encoding parameter set to produce a 
final encoded image. 

[0009] Another aspect of the invention provides an automated method of producing an 
encoded image for use in authenticating a printed version of a digital document. The method 
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comprises establishing a first digitized authentication image based on first authentication indicia, 
establishing a second digitized authentication image based on second authentication indicia and 
receiving at least one user-supplied encoding parameter. A first encoding parameter set 
including the at least one user-supplied encoding parameter is established. The first encoding 
parameter set is usable to encode the first authentication image. A second encoding parameter 
set including at least one non-user-supplied encoding parameter is established. The method 
further comprises producing a final encoded image from the first and second authentication 
images using the first and second encoding parameter sets. The final encoded image is 
decodable to view each of the first and second authentication images. 

[00010] Yet another aspect of the invention provides an automated system for incorporating 
encoded images into a digital document. The system comprises a user interface, a printer and a 
data processor in communication with the user interface and the printer. The data processor 
includes an authentication image module, an encoding parameter module, an encoding module 
and an embedding module. The authentication image module is adapted to produce digitized 
authentication images from user-supplied and non-user-supplied authentication indicia. The 
encoding parameter module is adapted to receive user-supplied encoding parameters, determine 
non-user-supplied encoding parameters, and assemble the user-supplied and non-user-supplied 
encoding parameters into encoding parameter sets for use in encoding digitized authentication 
images. The encoding module is adapted to construct encoded images using the encoding 
parameter sets and the digitized authentication images. The embedding module is adapted for 
incorporating the encoded image into the digital document. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[00011] The invention can be more fully understood by reading the following detailed 
description together with the accompanying drawings, in which like reference indicators are used 
to designate like elements, and in which: 

[00012] Figure 1 is a flowchart for a method of producing an encoded image for 
authenticating a document according to an exemplary embodiment of the invention; 

[00013] Figure 2 is an illustration of the use of a decoding device to decode an encoded image 
produced using a method according to an embodiment of the invention; 

3 
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[00014] Figure 3 is an illustration of a portion of an authenticated document showing the use 
of a decoding device to decode an encoded image produced using a method according to an 
embodiment of the invention; 

[00015] Figure 4 is an illustration of a portion of an authenticated document showing the use 
of a decoding device to decode an encoded image produced using a method according to an 
embodiment of the invention; 

[00016] Figure 5 is an illustration of a portion of an altered authenticated document showing 
the use of a decoding device to expose the alteration of encoded images produced using a method 
according to an embodiment of the invention; 

[00017] Figure 6 is an illustration of a portion of an altered authenticated document showing 
the use of a decoding device to expose the alteration of encoded images produced using a method ' 
according to an embodiment of the invention; 

[00018] Figure 7 is an authentication image that may be used in methods of the invention; ^ 

[00019] Figure 8 is an authentication image that may be used in methods of the invention; 

[00020] Figure 9a is an illustration of a portion of an authenticated document showing the use * 
of a decoding device to decode an encoded image to view a first authentication image; ^ % 

[00021] Figure 9b is an illustration of the authenticated document portion of Figure 8a 
showing the use of a decoding device to decode the encoded image to view a second 
authentication image; 

[00022] Figure 10 is a flowchart for a method of producing an encoded image for 
authenticating a document according to an exemplary embodiment of the invention; 

[00023] Figure 1 1 is an illustration of an encoded image produced using a method according 
to an embodiment of the invention; 

[00024] Figure 12 is an illustration of an encoded image produced using a method according 
to an embodiment of the invention; 

[00025] Figure 13 is an illustration of an encoded image produced from the encoded images of 
Figures 1 1 and 12 using a method according to an embodiment of the invention; 

4 
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[00026] Figure 14 is a flowchart for a method of producing an encoded image for 
authenticating a document according to an exemplary embodiment of the invention; 

[00027] Figure 15 is an illustration of an encoded image produced from two authentication 
images using a method according to an embodiment of the invention; 

[00028] Figure 16 is a schematic representation of an automated system for incorporating 
encoded images into a document according to an embodiment of the invention; 

[00029] Figure 17 is a schematic representation of an automated system for incorporating 
encoded images into a document according to an embodiment of the invention; and 

[00030] Figure 18 is a flowchart for a method of producing an encoded image for 
authenticating a document according to an exemplary embodiment of the invention. 

DETAILED DESCRIPTION OF THE INVENTION 

[00031] Embodiments of the present invention provide methods for the protection of 
documents using one or more encoded images that may be embedded in a background or source 
image or otherwise incorporated into the documents being protected. The systems and methods 
of the invention are related to those described in co-pending U.S. Application No. 10/847,962, 
filed May 18, 2004 under Attorney Docket No. 62770.000093, which is incorporated herein by 
reference in its entirety. 

[00032] As used herein, the term "encoded image" refers to a rasterized, scrambled or other 
manipulated variation of one or more authentication images that, when embedded in a document, 
r :: or in another printed background or source image, cannot be discerned from the base document 

material or other background or source image without the use of an optical decoding device. An 
encoded image may be generated from an authentication image using a particular set of 
characteristics that include encoding parameters corresponding to certain optical characteristics 
of the decoding device. When the encoded image is printed, placement of the decoding device 
over the printed encoded image in a predetermined orientation reveals the authentication image. 
Without the decoding lens, some or all of the encoded image may be visible, but indecipherable 
or indistinguishable from the background by the naked eye. 
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[00033] One method of producing encoded images is through a rasterization process such as 
that described in U.S. Pat. No. 5,708,717 (the '717 Patent), which is incorporated herein by 
reference in its entirety. In the *717 Patent method, digitized authentication images are encoded 
by rasterizing them according to a series of predetermined encoding parameters. Encoding 
parameters for this method may include a line frequency, which corresponds to the number and 
spacing of regular line segments into which an image is divided (rasterized). The size and 
number of divisions determines the frequency (i.e., number of line segments per inch) of the 
encoded image. The encoding parameters may also include an angular orientation to define how 
the authentication images will be oriented relative to the object upon which they are to be 
printed 

[00034] The decoding device of the '717 Patent method may be a lenticular lens having 
optical characteristics matching those of an encoded image. In particular, the lenticular lens may 
be formed with a frequency that corresponds to the frequency of the encoded image. When 
placed over the encoded image and rotated to the correct angular orientation, the encoded image 
is decoded, thereby allowing the authentication image(s) to be viewed. 

[00035] Although the rasterization methods of the '717 Patent are referred to throughout this 
specification, it will be understood by those of ordinary skill in the art that any image encoding 
method having a set of definable image characteristics relatable to a decoding device with 
corresponding optical characteristics may be used in conjunction with the methods of the present 
invention. 

[00036] As discussed above, encoded images are derived from one or more digitized 

authentication images using a set of encoding parameters. The invention involves the embedding 

of one or more encoded images into printable documents wherein the various encoding 

parameters used to generate the encoded images may come from multiple sources. The 

embedding process may be accomplished through the use of software that produces the encoded 

images for a user from selected authentication images. In some embodiments of the invention, a 

single encoded image may be constructed from an encoding parameter set having one or more 

encoding parameters generated or selected by the user and one or more additional encoding 

parameters that are generated or selected by a non-user or are selected automatically without user 

input In some embodiments, the single encoded image may be constructed from multiple 

6 
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authentication images, each having its own associated encoding parameter set. In these 
embodiments, some or all of the encoding parameter set for a first authentication image may be 
selected or generated by the user, while some or all of the encoding parameters for a second 
authentication image may be selected or generated by a non-user or selected automatically 
without user input. 

[00037] An aspect of the invention provides for establishing the characteristics of an encoded 
image so as to be unique for a particular document. This may be accomplished by selectively 
specifying unique authentication images or encoding parameters for the encoded image or by 
having such characteristics generated automatically in such as way as to uniquely associate them 
with the generation of a new document or with a particular modification of a previously 
generated document As will be discussed, the characteristics that may be varied include 
encoding parameters such as, for example, the line frequency of a rasterized image, the angle of 
a particular authentication image when viewed through a decoder or the decoding angle of the 
encoded image (i.e., the angle with respect to a specified frame of reference at which a decoder 
must be placed in order to view the authentication image). The unique encoded image 
characteristics may also include the content of the authentication image, which may, for 
example, include text generated to identify circumstances relating to document generation. 

[00038] As will be discussed, some embodiments of the invention provide for the use of an 
encoded image based on multiple encoded images, some of which may have associated 
characteristics that are unique to a particular document and some of which are not As noted 
above, some methods of the invention provide for user input into the generation of some but not 
all of the characteristics of the encoded images applied to a particular document. In some 
embodiments, the user may have control of some aspects of the document authentication method 
and not others. The user may, for example, be empowered to control the authentication images 
themselves but not the other encoding characteristics or parameters. 

[00039] The methods of the invention may be used in conjunction with the construction or 

modification of documents produced by virtually any document processing or graphics software. 

They may be adapted for use in a standalone software program for operating on documents 

generated by other document processing software. Alternatively, they may be adapted for use in 

software subroutines that may be integrated into document generation programs, such as, for 

7 
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example, Microsoft Word or Adobe Acrobat The input to the software program or subroutine 
may include some or all of a document to be authenticated and one or more encoding parameters. 
One or more authentication images may also be included as input. The output may be a file 
containing one or more digitized encoded images. The output file may be stored in memory and 
a user may insert the file into the document. Alternatively, the output file may include all or a 
portion of the document with one or more digitized encoded images already embedded therein In 
either case, when the document is printed, the encoded images are printed along with the 
document. 

[00040] As used herein, the term "document" is meant to encompass all forms of documents, 
both printed and electronic. In this manner, the described method may be used to protect a 
document created electronically, and continues to protect that document after it has been printed. 
The printed document is protected by making the document resistant to tampering, to 
unauthorized duplication, and to other forms of alteration, forgery, or fraud. 

[00041] Figure 1 is a flow chart of a method of producing an encoded image according to an 
embodiment of the invention. In this method, which may be implemented as a document 
authentication software program or as a subroutine, a single set of authentication indicia is used 
to produce a single encoded image using a set of encoding parameters assembled from user- 
supplied parameters and non-user-supplied parameters. The method begins at S5. At S 10, 
authentication indicia are received. Authentication indicia are representations of the visual 
image or text that will be produced when the printed encoded image is decoded. The 
authentication indicia may be a digitized form of any visual representation including but not 
limited to digitized images, computer-generated graphics and text strings from document 
processing programs. Thus, the authentication indicia may be in the form of an image file or any 
other data capable of being represented digitally that may be desirable for use in authenticating a 
document. 

[00042] Authentication indicia may be selected so as to provide information about the source 

of a document or about the user. For example, authentication indicia may include an image of a 

corporate logo or textual identification of a government agency. Alternatively, or in addition, 

authentication indicia may include information relating to the document to be authenticated. 

This may include general information that would be applicable to any document of a particular 

8 
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type or purpose or may be specific to a particular document. Authentication indicia for a specific 
document could, for example, include text from the document itself, or text relating to the 
circumstances of the generation of the document. Authentication indicia may also include a 
textual representation of the circumstances relating to the current authentication process. If, for 
example, the authentication method is carried out at the time of printing of a particular 
document, the authentication indicia could include a textual representation of a time and date to 
be associated with the document. Alternatively, or in addition, the authentication indicia may 
include information relating to a processor or station at which the document is generated, 
processed or printed. 

[00043] From the above, it will be understood by those of ordinary skill in the art, that 
authentication indicia may be made unique to a particular document or document type or may be 
generic to a particular user. In yet another alternative, the authentication indicia may be 
established by a licensor or provider of the authentication software with or without input from 
the user. 

[00044] The authentication indicia may be received as input from a user or may be received 
from a non-user source. User input may be supplied interactively or may be supplied and stored 
for later use by the software. In some embodiments, the user may be offered predetermined 
authentication indicia alternatives from which a user selection is made. Non-user-supplied 
authentication indicia may be read from storage or may be determined by an indicia 
determination module. 

[00045] Returning now to Figure 1 , at S20 a determination may be made as to whether the 
authentication indicia are in the form of a digitized authentication image. If the authentication 
indicia are or include data (e.g., a text string) in a form other than an image format, the data is 
rendered into an image format at S25. Rendering may be done by the authentication software 
code or by a separate module. In either case, the resulting digitized image file need not be 
displayed to the user. 

[00046] Encoding parameters are received at S30 and assembled into an encoding parameter 
set at S40. As previously discussed, encoding parameters are applied to a digitized 
authentication image to produce a digitized encoded image. The encoding parameters may be 

9 
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used to determine the characteristics of the encoded image and/or the appearance of the 
authentication image when the encoded image is decoded. The nature of the encoding 
parameters depends on the encoding methodology used. Examples of encoding parameters for a 
rasterization method may include resolution or frequency of the encoded image and the 
orientation at which a decoding lens must be positioned to reveal the authentication image 
(decoding angle). Encoding parameters may also include values relating to the geometry, 
position and orientation of the authentication image when viewed through the decoder. 
Encoding parameters could also include such variables as print resolution or a repetition factor or 
frequency used to generate a wallpaper pattern from the authentication indicia. 

[00047] Figure 2 illustrates a decoding lens 30 and an exemplary encoded image 20 applied to 
a document portion 10. The document portion 10 has horizontal and vertical axes 22, 24 and the 
decoding lens 30 has first and second orthogonal axes 32, 34. The encoded image 20 was 
formed from a digitized authentication image comprising the text 'Department of 
Transportation." The encoding parameters used to form the encoded image 20 include the 
decoding angle a and the authentication image angle p. The decoding angle a may be defined as 
the angle between the horizontal document portion axis 22 and the first decoding lens axis 32 
when the decoding lens 30 is in the correct position for decoding the encoded image 20. The^ 
image angle p may be defined as the angle between the horizontal document portion axis 22 and 
the text orientation line 42 of the authentication image 40 when viewed through the decoding 
lens 30. It will be understood by those of ordinary skill in the art that the authentication image 
40 may be viewable with varying degrees of clarity when the decoding lens 30 is oriented with 
its horizontal axis 32 within about +1-5 degrees of the decoding angle a. It will also be 
understood that the decoding angle a and the image angle P may be selected independently of 
one another. 

[00048] It will be understood that the angular definitions above are exemplary only and that 
the actual encoding parameter definitions may vary depending on the document and the needs of 
the user. 

[00049] Individual encoding parameters may be user-provided or non-user-provided. User- 
provided encoding parameters may be supplied by the user interactively or may be supplied and 

stored for later use by the software. In some embodiments, the user may be offered 
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predetermined authentication encoding parameter alternatives from which a user selection is 
made. Non-user-provided encoding parameters may be pre-programmed into the software or 
retrievable from data storage. Non-user-supplied encoding parameters may also be calculated or 
determined by the software as a function of a processing circumstance or based on a random 
selection. A processing circumstance could include, for example, the time at which the encoded 
image is generated or characteristics of the operating environment (e.g., characteristics or 
identification of the processor generating the document). Such information could be linked by a 
predetermined relationship to a particular encoding parameter such as the decoding angle. 
Alternatively, information relating to a processing circumstance or other non-user-supplied 
information may be introduced into the authentication indicia. 

[00050] Linking encoding parameters to processing circumstances makes it possible to 
determine circumstances relating to the processing or printing of a document from the encoded 
image, even if the text of the encoded image is fixed. This provides an additional layer of 
authentication by allowing an investigator to verify information found on the face of a printed 
document. For example, in an encoded image having a decoding angle functionally related to 
the document date, the investigator would be able to determine the date from the encoded angle 
and compare it to the date shown on the document. 

[00051] As noted above, encoding parameters may be user-supplied or non-user-supplied. In 
a particular authentication method of the invention, the encoding parameter set includes at least 
one encoding parameter that is non-user-supplied The non-user-supplied encoding parameter 
can be a fixed parameter or may be tied to a processing circumstance as described above. 
Among other things, including an encoding parameter that is not controllable by the user 
provides protection against misuse by a particular user. The non-user-supplied encoding 
parameter(s) may be set by a software licensing or control entity or may be set by an 
administrator of the user's organization. As discussed above, the non-user-supplied encoding 
parameter(s) may also be constructed by the software without input from the user. 

[00052] At S50, a digitized encoded image is produced from the digitized authentication 

image using the encoded parameter set. As discussed above, any method for creating an encoded 

image from the authentication image may be used, including the method described in the '717 

Patent. In that method, the authentication image is rasterized to produce an encoded image 
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having a certain frequency that may correspond, for example, to a certain number of printed lines 
per inch. When printed, the encoded image may be viewed only through the use of an optical 
decoding device, preferably a lenticular lens having a line frequency corresponding to that of the 
encoded image. 

[00053] Once the digitized encoded image has been constructed, it may be returned as output 

of the authentication software at S60. The encoded image may be output as an image file and 

saved for later incorporation into a document. Alternatively, the encoded image may be inserted 

directly into the document if the software is integrated with the document generation software. 

The document containing the encoded image may then be further processed, transmitted or 

printed. It will be understood that the encoded image is graphically embedded within the 

document so that it is printed simultaneously with the document When the document is printed, 

the printed encoded image will be produced in its encoded form so that it cannot be viewed - -._ r 4_ - 

except with the corresponding decoding device. The method ends at S95. 

[00054] In an illustrative embodiment, the digitized encoded image is added to the word - 

processing version of a document along with a background image or surrounding sold color 

background that may be in the form of a geometric shape such as a square. The '717 Patent T ~ - 

describes how a rasterized encoded image may be embedded into a source image or background. 

The visible image or background is also rasterized at the selected frequency so that the encoded . * T £_ 

image may be adjusted according to the color and density of the various parts of the visible 

image. The encoded image and the visible image are then printed together, with the visible 

image reproduced in its assembled (i.e., visible) form and the latent image in its encoded (i.e., 

invisible) form. The latent image becomes visible only when a decoding lens constructed for the 

selected frequency of the latent image is placed over the latent image. 

[00055] The digitized encoded image of the present invention may be similarly combined with 

a background or source image and added to an electronic copy of the document to be 

authenticated. This may be done by the software used to generate the encoded image or by a 

separate software program or word processing program subroutine. When the document to be 

authenticated is printed, the encoded image (and any background or source image embedded 

with the encoded image) is also printed. While the background and/or source image are visible 

on the printed copy, the encoded image may be viewed only through the use of a properly 
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oriented decoding device with optical properties configured to correspond to the encoding 
parameters of the encoded image. 

[00056] The document and encoded image may be printed on relatively low resolution 
printers, such as those commonly found in many home and office settings. These may include 
laser, ink-jet, thermal and indigo printers, for example. A resolution of 200 dots per inch (dpi) 
has been found to be adequate to produce an encoded image that can be easily verified when 
viewed on a printed document. Lower resolutions may also provide adequate results. 

[00057] Once printed, the authentication image from which the encoded image was produced 
may be revealed through the use of a corresponding decoding device/lens. As shown in Figure 2, 
— when a lens 30 is placed in the proper orientation over an encoded image 20 that has been printed 

on a document portion 10, the authentication image 40 is clearly displayed. If the lens 30 is 
rotated away from this orientation, the authentication image becomes increasingly distorted and 
unreadable. 

[00058] In some embodiments of the invention, one or more non-user-supplied encoding 
parameters may be determined by the authentication software program. In particular, the 
software program may generate encoding parameters that modify the orientation and/or position 
of the authentication image as viewed upon decoding of the encoded image. This modification 
may be random or systematic, but in either case, the orientation is varied to produce an 
authentication image that is ideally unique to a particular document. Another approach is to 
automatically add the non-user-supplied indicia or information into the authentication indicia. 
The non-user-supplied indicia may be placed or oriented so as to be unique for each document. 

[00059] When an attempt is made to alter a unique (or semi-unique) authentication image 
using a "cut and paste" combination with a portion of another authentication image, the two 
image portions will not match up when decoded. For example, in the two documents 120, 130 
with encoded images 121, 131 shown in Figures 3 and 4, the authentication indicia 110, 
("Department of Transportation") used to produce the wallpaper authentication images 122, 132 
is the same for both authentication images. However, through the use of random or systematic 
modification of the authentication image angle p from document to document, the authentication 
image angle pi for the first authentication image 122 is different from the image angle p 2 of the 
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second authentication image 132 when viewed using decoding device 140. Thus, if an attempt is 
made to superimpose or paste a portion 134 of the second image 132 into the first image 122, a 
clear mismatch results as shown in Figure 5. This mismatch indicates that the document has 
been altered. 

[00060] In some embodiments, the authentication image angle P may remain unchanged from 
document to document but the spacing of the authentication indicia 1 10 is systematically or 
randomly varied so that the wallpaper authentication image is unique for each document. As 
shown in Figure 6, when an attempt is made to cut and paste the wallpaper images from portions 
1 120, 1 134 of two such documents, the resulting decoded image will be distorted due to the 

^ mismatch of the text in the two images 1 122, 1132. 

■"">•? ■** 

[00061] It can thus be seen that the use of document-unique variations in encoding parameters 
may be used to counteract counterfeiting. Once the document is generated and printed, later 
attempts to cut and paste portions of the encoded images from multiple documents— each having 
a different encoding parameter set— to create a new encoded image are readily identifiable 
because the authentication image portions will be misaligned and/or grammatically garbled. If 
the document-unique encoding parameters are non-user-supplied parameters, even counterfeiting 
by the generator or printer of the document is deterred. 

[00062] As an alternative to or in addition to determining the encoding parameters relating to 
the authentication image, some methods of the invention may allow the software to determine 
parameters relating to the orientation or configuration of the authentication image. For example, 
. ., the software may determine a decoding angle a. Thus, the decoding angle a may be made 

unique so that otherwise similar documents may be uniquely identified. If, as previously 
described in conjunction with Figure 5, a counterfeiter attempts to apply a portion of one 
encoded image over another, the result will be that the decoding device must be oriented at two 
different angles in order to view the entire authentication image. Thus, even if the authentication 
images of the two documents are perfectly aligned and positioned, the tampering will still be 
evident. 

[00063] It will be understood that the above-described orientation parameters and other 
encoding parameters, as well as the authentication indicia, may be used alone or in combination 
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to establish a unique document "signature" that prevents the document from being tampered with 
and which may allow the circumstances of document generation to be determined. It will also be 
understood that any or all of the encoding parameters and the authentication indicia may be user- 
provided or non-user-provided. 

[00064] In some embodiments of the invention, document authentication may be 
accomplished through the use of a plurality of authentication images combined to form a single 
encoded image. The authentication images used may have multiple sources. For example, one 
or more of the authentication images may be based on user-supplied indicia while one or more 
additional authentication images may be based on non-user-supplied indicia. Any one 
authentication image may also be a combination of user-supplied indicia and non-user-supplied 
indicia. 

[00065] There are several approaches to forming a single encoded image from a plurality of 
authentication images. One straightforward approach is to digitally combine the plurality of 
authentication images into a single integrated authentication image. The integrated 
authentication image may then be encoded through the methodology previously described. As 
before, the encoding parameter sets for the authentication images may each be a combination of 
user-provided and non-user-provided encoding parameters. However, while the authentication 
image encoding parameters could differ for each authentication image, the encoding parameters 
associated with the decoding of the encoded image (i.e., the decoding angle, decoder frequency, 
etc.) would be the same for all. The result is an encoded image that, when printed, allows the 
entire integrated authentication image to be viewed when a corresponding decoding device is 
positioned at a single orientation over the encoded image. 

[00066] Another approach is to encode the plurality of authentication images so that the 
encoding parameters associated with the decoding of the encoded image (the decoding angle, 
decoder frequency, etc.) may be different for each of the authentication images. Using this 
approach, a single encoded image may be created that, when printed, allows only one 
authentication image to be viewed for a given decoding device or for a given decoding angle. 

[00067] Figures 7-9 illustrate an example of this approach for the case when two 
authentication images are used to generate a single encoded image. Figures 7 and 8 illustrate 

15 



ir *"-*O450 l [httpt'/www.getthepatent. com/Login. dog^ Page 1 8 of 61 

WO 2005/034501 PCT/US2004/030265 



first and second authentication images 220, 230, respectively. Applying the approach of the 
previous paragraph, the first authentication image 220 is associated with an encoding parameter 
set in which the decoding angle is 0 degrees and the second authentication image 230 is 
associated with an encoding parameter set in which the decoding angle is 90 degrees. The 
encoding parameters associated with the decoding device are the same for the two authentication 
images. The authentication images 220, 230 were used with the encoding parameters to produce 
an encoded image 240, which was then applied to a document Figures 9a and 9b illustrate a 
document portion 210 to which the encoded image has been applied. In Figure 9a, an 
appropriate decoding device 250 is oriented at 0 degrees, allowing the first authentication image 
220 to be viewed. The second authentication image 230 remains hidden. In Figure 9b, the 
decoding device 250 has been rotated by 90 degrees, thereby obscuring the first authentication 
image 220 and allowing the second authentication image 230 to be viewed. 

[00068] It should be appreciated that, as shown in Figures 8a and 8b, the decoding angle is 
completely independent of the angle of the authentication indicia and the authentication image 
angle. 

[00069] There are at least two ways in which a single encoded image may be generated from a 
plurality of authentication images having different decoder-associated encoding parameters: (1) 
encode each authentication separately and integrate them into a single encoded image; and (2) - 
encode the authentication images simultaneously into a single encoded image. A flow chart of a 
method that uses the first of these approaches to provide a single encoded image from two 
authentication images is illustrated in Figure 9. The method begins at S105. At SI 10, 
authentication indicia for a first authentication image are received. The authentication indicia 
may be in the form of an image file or any other data capable of being represented digitally that 
may be desirable for use in authenticating a document. The authentication indicia for the first 
authentication image may be either user-supplied or non-user-supplied. The authentication 
indicia may include information relating to a processor or station at which the document is 
generated, processed or printed or may include text or other data taken from the document itself. 

[00070] At S 1 12, a determination may be made as to whether the authentication indicia are in 

the form of a digitized authentication image. If so, the authentication indicia are accepted as a 

first digitized authentication image. If the authentication indicia are or include data (e.g., a text 
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string) in a form other than an image format, the data is rendered into an image format at S 1 13, 
the output being the first authentication image. 

[00071] Encoding parameters for use with the first authentication image are received at SI 14 
and assembled into a first encoding parameter set at S 1 16. Individual encoding parameters may 
be user-provided or non-user-provided. User-provided encoding parameters may be supplied by 
the user interactively or may be supplied and stored for later use by the software. Non-user- 
provided encoding parameters may be pre-programmed into the software or retrievable from data 
storage. Non-user-supplied encoding parameters may also be calculated or determined by the 
software as a function of a processing circumstance or based on a random selection. 

[00072] At SI 18, a first digitized encoded image is produced from the digitized authentication 
image using the first encoded parameter set. As previously discussed, any method for creating 
an encoded image from the first authentication image may be used. 

[00073] At SI 20, authentication indicia for a second authentication image are received. 
Again, the authentication indicia for the second authentication image may be either user-supplied 
or non-user-supplied. The authentication indicia may again include information relating to a 
processor or station at which the document is generated, processed or printed or may include text 
or other data taken from the document itself. 

[00074] At S122, a determination may be made as to whether the authentication indicia are in 
the form of a digitized authentication image. If so, the authentication indicia are accepted as a 
second digitized authentication image. If the authentication indicia are or include data (e.g., a 
text string) in a form other than an image format, the data is rendered into an image format at 
S 123, the output being the second authentication image. 

[00075] Encoding parameters for use with the second authentication image are received at 
S124 and assembled into a second encoding parameter set at S126. Individual encoding 
parameters for the second authentication image may be user-provided or non-user-provided and 
may be provided by and/or received via any of the previously described methods. 

[00076] At S128, a second digitized encoded image is produced from the digitized 
authentication image using the second encoded parameter set. Any method for creating an 
encoded image from the second authentication image may be used, but is preferably the same as 
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the method used for the first authentication image. It will be understood that if additional 
authentication images are desired, steps S120-S128 may be repeated as necessary. 

[00077] At S 130, the first and second encoded images are integrated to produce a single 
composite digitized encoded image. The composite digitized encoded image may be stored or 
returned as output of the authentication software at S 140. The encoded image may be output as 
an image file and saved for later incorporation into a document Alternatively, the encoded 
image may be inserted directly into the document if the software is integrated with the document 
generation software. The document containing the encoded image may then be further 
processed, transmitted or printed. The encoded image is graphically embedded within the 
^ document so that it is printed simultaneously with the document. When the document is printed, 

the printed encoded image will be produced in its encoded form so that the authentication images 
cannot be viewed except with the corresponding decoding device or devices. The method ends 
at S 195. 

[00078] Figures 1 1-13 illustrate the use of this approach with a rasterization methodology 
similar to that described in the '717 Patent. Figure 1 1 illustrates a first encoded image 310 
embedded into a gray background block. The first encoded image 3 10 is associated with a first 
authentication image (not shown) and a particular set of encoding parameters including a first 
encoding angle. A portion 312 of the first encoded image 3 10 is magnified to show the 
orientation of the lines of the combined background and encoded image after rasterization. 
Figure 12 illustrates a second encoded image 320, which was separately encoded with the same 
rasterization frequency but a different encoding angle. The second encoded image 320 is 
associated with a second authentication image (not shown). A portion 322 of the second 
encoded image 320 is magnified to show the orientation of the lines of the combined background 
and encoded image after rasterization. Figure 13 illustrates an integrated encoded image 330 
constructed by combining the first and second encoded images 3 10, 320. A portion 332 of the 
integrated encoded image is magnified to illustrate the effect of combining the two rasterized 
images. The integrated encoded image 330 will reveal the first authentication image when a 
decoding device is oriented at the first decoding angle and will reveal the second authentication 
image when rotated to the second decoding angle. 
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[00079] A flow chart of a method that uses the second approach to providing a single encoded 
image from two authentication images having different decoder-associated encoding parameters 
is illustrated in Figure 14. The method begins at S205. At S210, authentication indicia for a first 
authentication image are received. The authentication indicia may be in the form of an image 
file or any other data capable of being represented digitally that may be desirable for use in 
authenticating a document. The authentication indicia for the first authentication image may be 
either user-supplied or non-user-supplied. The authentication indicia may include information 
relating to a processor or station at which the document is generated, processed or printed or may 
include text or other data taken from the document itself. 

: [00080] At S212, a determination may be made as to whether the authentication indicia are in 

the form of a digitized authentication image. If so, the authentication indicia are accepted as a 
first digitized authentication image. If the authentication indicia are or include data (e.g., a text 
string) in a form other than an image format, the data is rendered into an image format at S213, 
the output being the first authentication image. 

[00081] Encoding parameters for use with the first authentication image are received at S214 
and assembled into a first encoding parameter set at S216. Individual encoding parameters may 
be user-provided or non-user-provided. User-provided encoding parameters may be supplied by 
the user interactively or may be supplied and stored for later use by the software. Non-user- 
provided encoding parameters may be pre-programmed into the software or retrievable from data 
storage. Non-user-supplied encoding parameters may also be calculated or determined by the 
software as a function of a processing circumstance or based on a random selection. 

[00082] At S220, authentication indicia for a second authentication image are received. 
Again, the authentication indicia for the second authentication image may be either user-supplied 
or non-user-supplied. The authentication indicia may again include information relating to a 
processor or station at which the document is generated, processed or printed or may include text 
or other data taken from the document itself. 

[00083] At S222, a determination may be made as to whether the authentication indicia are in 
the form of a digitized authentication image. If so, the authentication indicia are accepted as a 
second digitized authentication image. If the authentication indicia are or include data (e.g., a 
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text string) in a form other than an image format, the data is rendered into an image format at 
S223, the output being the second authentication image. 

[00084] Encoding parameters for use with the second authentication image are received at 
S224 and assembled into a second encoding parameter set at S226. Individual encoding 
parameters for the second authentication image may be user-provided or non-user-provided and 
may be provided by and/or received via any of the previously described methods. It will be 
understood that if additional authentication images are desired, steps S220-S226 may be repeated 
as necessary. 

[00085] At S230, a single digitized encoded image is produced from the first and second 
digitized authentication images using the first and second encoded parameter sets. Any method 
for creating encoded images from the first authentication image may be used. The digitized 
encoded image may be stored or returned as output of the authentication software at S240. The 
encoded image may be output as an image file and saved for later incorporation into a document. 
Alternatively, the encoded image may be inserted directly into the document if the software is 
integrated with the document generation software. The document containing the encoded image 
may then be further processed, transmitted or printed. The encoded image is graphically 
embedded within the document so that it is printed simultaneously with the document. When the, 
document is printed, the printed encoded image will be produced in its encoded form so that the 
authentication images cannot be viewed except with the corresponding decoding device or 
devices. The method ends at S295. 

[00086] Figure 15 illustrates an encoded image 410 produced using this approach with a 

rasterization methodology similar to that described in the '717 Patent. The encoded image 410 

embedded into a gray background block. The encoded image 410 is associated with a first and a 

second authentication image (not shown), each having a particular set of encoding parameters 

including differing first and second encoding angles. In this method, the first and second 

authentication angles are rasterized and encoded simultaneously. A portion 412 of the first 

encoded image 410 is magnified to show the resulting line structure. Similar to the integrated 

encoded image 330 of Figure 13, the encoded image 410 will reveal the first authentication 

image when a decoding device is oriented at the first decoding angle and will reveal the second 

authentication image when rotated to the second decoding angle. 
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[00087] Some embodiments of the invention provide for the generation of multiple encoded 
images, each of which may include one or more authentication images. An illustrative 
embodiment provides for the generation of two encoded images, each having a separate set of 
characteristics. The authentication images of the two encoded images may be the same or 
similar or may be entirely different. The encoding parameters of the two images may be 
different so that the encoded images may have, for example, different image and/or encoding 
angles or different decoder-associated parameters (e.g., line frequency if a rasterization encoding 
technique is used). The various encoding parameters for the two encoded images may be any 
combination of user-supplied and non-user-supplied parameters and may be established so that 
the encoded images are document unique. In an exemplary case, the parameter sets would be 
established so that only one of the encoded images is document-unique while the other is only 
partially unique. The partially unique document may, for example, have characteristics common 
to all documents generated in a particular facility. 

[00088] Multiple encoded images produced in the above manner may be stored for later use or 
immediately embedded in a single document, each encoded image being embedded in 
substantially the same manner as a single encoded image with multiple authentication images. 

[00089] As previously discussed, in various applications of the method of the invention, it 
may be desirable that some or all of the indicia appearing in various authentication images for 
documents produced by a single user may be common to multiple documents while some are 
unique or semi-unique to a particular document. Authentication indicia that may change from 
one document to the next may be referred to as variable indicia. Variable indicia may, for 
example, be user-supplied for a particular document or set of documents or may be derived from 
the document itself. Allowing variable indicia to be user-supplied gives the document creator 
control over at least some of the information that is included in an encoded image. In an 
exemplary application, the document to be protected could be the title of a vehicle. Variable 
indicia in this case might include the identity of the lien holder, the mileage of the car, or any 
other piece of information that may be used in an authentication image to allow later verification 
of the authenticity of the title. It should be noted that the category or type indicia may or may 
not be fixed. For example, the indicia category, "name," may be the same for every document, 
but the actual indicia are variable because the name may change from document to document. 
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[00090] Continuing the example of protecting a vehicle title, indicia identifying the lien 
holder may always be included as indicia that is sent to the program performing the method of 
the invention. The indicia is variable because the identity of the lien holder may vary from title 
to title. In other cases, the user may be given additional control over the type of information to 
be used as the variable indicia, as well as its identity. For example, the user may first select 
"mileage'* as the variable indicia type, and may then enter the appropriate mileage indicia, which 
will then be used to construct an authentication image, which will then be decoded. 

[00091] "Fixed" indicia are those that ace unchanged from unchanged from document to 
document. These may be set by the user but will often be established by a managing authority, 
software licensor or by the software itself. Returning to the vehicle title example, an example of 
fixed indicia that may be used on all title documents could be "Department of Transportation." 
These indicia could be used, for example, to form the wallpaper-type authentication image 
shown in Figure 7. It will be understood that although the indicia used to form an authentication 
image may be fixed, the encoding parameters associated with the indicia may be variable so that 
the authentication image, the encoded image or both may still be document-unique. 

[00092] In many of the embodiments of the invention, some or all of the non-user-supplied 
indicia and/or encoding parameters used to create an encoded image may be read or generated by _ 
the software executing the method to produce the encoded image. The resulting encoded image 
may serve as a signature to identify a particular document printed with that encoded image. In 
some instances, the software may establish non-user-supplied indicia or encoding parameters 
based on a document processing circumstance associated with the document to which the 
r encoded image is to be applied. As used herein, a "document processing circumstance" may be 

any circumstance, description or quality associated with a particular document. This may 
include the content of the document or any of the circumstances associated with the generation, 
modification, processing or printing of the document. Document processing circumstances for a 
particular document may include, for example, the date and time the document was generated or 
printed, identification of the terminal and/or operator generating or processing the document, or a 
document number based on a running count of similar documents or based on a number of uses ' 
of the software. Information associated with document processing circumstances may be used to 
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form indicia for an authentication image or may be used to determine one or more encoding 
parameters. 

[00093] Document processing circumstances may be determined by the software using any 
method known in the art. For example, the software may obtain time and date information from 
an internal clock on the data processor where the software is being run. The software may also 
obtain information about the data processor or network components to which the data processor 
is connected. The software may also read indicia from a predetermined or random field of the 
document itself. 

[00094] Document processing circumstances may also be generated and/or provided by a 
separate software module, a hardware component connected to the data processor or another 
processor or server connected to the data processor via a network. With reference to Figure 16, 
an automated document authentication system 500 for incorporating encoded images into a 
document includes a data processor 510 connected to a user interface 520 and a printer 530. The 
data processor 510 may be configured to process software adapted for carrying out the methods 
of the invention.. In an illustrative embodiment, the data processor 510 may include an 
authentication image module 512 that receives or generates authentication indicia and, if 
necessary renders the indicia to form one or more digitized authentication images. The 
authentication indicia and/or encoding parameters may be received from the user via the user 
interface 520. The data processor 510 may also include an encoding parameter module 514 that 
receives and assembles encoding parameters into encoding parameter sets for use in encoding the 
digitized authentication images. An encoding module 516 uses the encoding parameters and the 
digitized authentication images to construct an encoded image, which may be stored in a data 
storage module 519 or sent to an embedding module 518, which incorporates the encoded image 
into a document. The resulting document and encoded image may be stored in the data storage 
module 519 or printed using the printer 530. 

[00095] The automated document authentication system 500 may also include an 

authentication control device 540 that may be used to control the use of the authentication 

process with the data processor 510. The authentication control device 540 may be a separate 

processor, module or data storage device from which the authentication software may obtain 

authentication indicia, encoding parameters or data relating to a processing circumstance. As 
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will be discussed hereinafter, the authentication control device 540 may also be used to prevent 
unauthorized use of the authentication software. 

[00096] With reference to Figure 17, another aspect of the invention provides an automated 
document authentication system 600 for incorporating encoded images into a document wherein 
some or all of the actions relating to generating the encoded image(s) and embedding them into 
the document are carried out by an authentication server 640 connected to the user's work station 
or data processor 610 through a network 660. The network 660 may, by way of example, be a 
local area network that connects a co-located authentication server 640 to a plurality of data 
processors 610, Alternatively, the authentication server 640 may be remotely located relative to 
the data processor 610, the two being connected or connectable via the Internet or other wide 
area network. In either case, the user data processor 610 may be one of a plurality of user data 
processors and may be connected to a user interface 620 and a printer 630. The document 
authentication system 600 may also include an authentication control device 650 attached to or in 
communication with the user data processor 610. 

[00097] The automated document authentication system 600 may be used to carry out any of 
the methods described herein. It will be understood that the actions of these methods may be . 
divided up so that some or all of the actions are carried out as part of an interactive transactions 
conducted between the user data processor 610 and the authentication server 640. It will also be 
understood that one or more of the actions of the methods of the invention may be carried out by 
the user data processor 610 while one or more additional actions are carried out by the 
authentication server 640. 

[00098] In an exemplary embodiment, an interactive session may be established between the 
user data processor 610 and the authentication server 640. As part of this transaction, the user 
may submit to the authentication server 640 one or more authentication images and/or one or 
more user-supplied encoding parameters. These may then be used by the authentication server 
640 to produce an encoded image that is returned to the user data processor 610, where the 
encoded image is embedded into a document and stored or printed to produce an authenticated 
printed document. Additional non-user-supplied authentication images and/or encoding 
parameters may be incorporated into the encoded image by the authentication server 640. 
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[00099] In another exemplary embodiment, the user may submit an entire document to the 
authentication server 640, which creates and embeds an encoded image into the document and 
returns it to the user data processor 610 for printing or storage. Along with the document, the 
user may submit one or more authentication images and/or one or more user-supplied encoding 
parameters for the authentication server 640 to use in creating the encoded image. 

[000100] In certain embodiments of the invention, an additional level of security may be 
implemented to prevent users of the method or the software from using unauthorized images or 
encoding parameters. In these embodiments, encoding parameters submitted by a user axe 
validated before an encoded image is constructed. These embodiments may include the use of 
external devices such as the authentication control device 540 to add an independent layer of 
security removed from the control of the user. In certain embodiments, this may include the use 
of multiple validation techniques to create a multi-tiered structure to ensure that creating the 
encoded image is authorized 

[000101] Figure 18 is a flow chart of a method of producing an encoded image according to an 
embodiment of the invention wherein the user's authorization to use the method is validated 
before the encoded image is produced. The method begins at S305 and at S3 10, encoding 
parameters and variable indicia are received by the data processor running the authentication 
software. These may include any combination of user-supplied and non-user-supplied 
authentication indicia and/or encoding parameters. At S320 and S330, a verification is 
conducted to determine if the encoding parameters requested by and/or provided by the user fall 
within previously established criteria. These criteria may, for example, be established limits on 
the terms of use agreed to by the user. For example, a user may be permitted to choose only a 
certain frequency or orientation of an authentication image. The verification criteria may also 
include an acceptable number of uses of the software, the actual number of uses being 
incremented each time the software is used. An attempt by the user to exceed the usage limits or 
to use encoding parameters or indicia that are outside the terms of use results in an eixor message 
being displayed to the user at S335. The method may include prompting the user for alternative 
input or may end upon determining that the criteria for proceeding with encoding have not been 
met. If the criteria are met, the authentication indicia are used to establish a digitized 
authentication image (or images) at S340. If necessary, some or all of the authentication indicia 

25 



VVO05034501 (http://mvw.getthepatent.com/Login. dog/$sandy.robb1 /Fetch /WO05034501 .(^c?toolbar=bottpmpnum=WO050345pipart=main] Page 28 of 61 
WO 2005/034501 PCT/US2004/030265 



may be rendered to form a digitized image as previously discussed. At S350, the encoding 
parameters are assembled into an encoding parameter set, which is used to encoded the 
authentication image(s) at S360. The resulting encoded image may be stored or embedded into a 
document as previously discussed. The method ends at S395. 

[000102] As noted, the methods of the invention may include verifying whether the request by 
the user to create an encoded image would be in excess of the number of encoded images allotted 
the user. The user may be permitted to make an unlimited number of encoded images, or the * 
user may have the right to only create a certain number of encoded images or to create encoded 
images for a certain period of time. 

[000103] Verification may be conducted in a number of ways. For example, an electronic 

security key may be used. A security key is typically a piece of hardware that attaches to a 

parallel or USB portal of a computer. A security key may contain a separate memory, clock ; * 

and/or power supply that operate independently of the computer to which they are attached. An 

example of a security key that is usable in embodiments of the invention is the HASP (Hardware 

Against Software Piracy) device available from Aladdin Knowledge Systems of Arlington 

Heights, Illinois. 

[000104] A security key may be programmed to validate only certain ranges of encoding ~ 

parameters and to prevent processing of the method if the received encoding parameters are v 

outside these ranges. It may also be equipped with a clock or counter to monitor the number of 

encoded images created for use in document protection. Security keys may also be adapted to 

generate or assist in generating information that may be used to represent a document processing 

circumstance. 

[000105] In an alternative embodiment, verification may be performed by a separate server 
connected to the user's workstation over a network or by other software-based verification and 
locking methods loaded directly on the user's workstation. In one exemplary embodiment in 
which a server is used, the server may be centrally controlled by a party independent from the 
user to monitor the security of the image creation. When the encoding parameters are received 
by the server, the server may verify the identity of the user by, for example, the address of the 
computer sending the request using known techniques and compare the transmitted data to data 
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stored in the server's memory. The encoding parameters associated with the request from the 
user may then be compared to the criteria established for the user. If the request is within the 
user's allotment and if the encoding parameters are valid, the server may confirm the request. 
Positive verification may be transmitted back to the user's workstation permitting the program to 
continue with the process. Likewise, if the verification returns a negative result, the program 
may return an error message to the user explaining the denial of verification. 

[000106] It should be appreciated that these methods of verification are by way of example 
only and that any method of verifying the encoding parameters may be used in accordance with 
various embodiments of the invention. Embodiments in which the verification is external to the 
workstation, may be advantageous in applications where the user purchases the right to encode a 
specific number of images or to encode a certain number of images over a period of time. A 
clock or counter contained on an external device independent from the workstation may prevent 
the user from tampering with the workstation, such as resetting the date on the workstation to 
provide additional time to use the encoding software without paying. 

[000107] Multiple verification techniques may be used in combination with one another to 
provide multiple tiers of protection or which may permit more efficient use of the system. For 
example, an authentication software customer may be located in an office or agency with many 
users, each creating documents at a separate workstation. In certain methods of the invention, a 
first level of verification may be applied at the user workstation level, while a second level of 
verification may be applied at the customer level. Such multiple verification techniques may be 
advantageous to monitor overall encoded image creation for the customer as well as encoded 
image creations at individual workstations or groups of workstations, which may use different 
encoding parameters or need to produce a different number or type of encoded image. 

[000108] By way of example, a government agency may wish to purchase the right to create a 

specific number of encoded images by using the described methods. However, certain people 

within the agency may need to produce disparate numbers of protected documents. Multiple 

verification may provide for a central processor to count the total number of encoded images 

created for the agency, while software on each workstation counts the number of encoded images 

created at that workstation. At any given time, authorization may thus be required from both the 

local data processor and a remote central processor before an encoded image may be created. 
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[000109] A combination of local and remote verification techniques can be used to prevent 
unauthorized access. For example, even if a counterfeiter were able to steal both the software for 
creating the encoded images and a security key for a user work station, he would still be unable 
to create an encoded image without authorization from the remote central processor. 

[000110] It should be appreciated that in embodiments where an authentication server is used 
to verify the encoding parameters over a network, the server could additionally provide fixed 
indicia, including a unique identifier. Alternatively, as previously described, the entire encoded 
image creation could be performed by software on the authentication server or another location 
external to the user's workstation without any action on the part of the user other than to provide 
any required user-supplied indicia and/or encoding parameters. For example, the authentication 
server may receive user-supplied encoding parameters and indicia for verification. Upon . . . 
verifying that the user-supplied encoding parameters and indicia are within the predetermined ^ 
criteria for the user, the server could (if necessary) render the authentication indicia, assemble the 
encoding parameters and use them to create an encoded image. The encoded image could be 
saved as a file and transmitted back to the user at the work station. 

[000111] In some embodiments of the invention, the authentication indicia may include unique 
information such as information relating to a document processing circumstance as describejd 
above. Such indicia, along with other characteristics or information relating to the document 
may be transmitted to or generated by the server. This information may be stored in a database 
along with other information relevant to the document and may be used later to verify the 
authenticity of a document. For example, as previously described, a document may have indicia 
corresponding to the time and date of creation contained in the authentication image. In some 
circumstances, these indicia may be compared to information derived directly from the encoded 
image. Alternatively, the encoded image may be used to as a signature for the document that 
links the document to the information stored in the central database. When the authentication 
image is revealed, the an investigator can use it to determine recall the information from the 
database, which can then be compared to the indicia on the face of the document. In yet another 
alternative, information obtained directly from the encoded image could be used in combination 
with information stored in the database to determine whether the document being verified 
corresponds to the one for which the encoded image was created. 
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[000112] General aspects of possible implementation of the inventive technology will now be 
described. Various method and operating system embodiments of the inventive technology are 
described above. It will be appreciated that the systems of the invention or portions of the 
systems of the invention may be in the form of a "processing machine/* such as a general 
purpose computer, for example. As used herein, the term "processing machine" is to be 
understood to include at least one processor that uses at least one memory. The at least one 
memory stores a set of instructions. The instructions may be either permanently or temporarily 
stored in the memory or memories of the processing machine. The processor executes the 
instructions that are stored in the memory or memories in order to process data. The set of 
instructions may include various instructions that perform a particular task or tasks, such as those 
tasks described above in the flowcharts. Such a set of instructions for performing a particular 
task may be characterized as a program, software program, or simply software. 

[000113] As noted above, the processing machine executes the instructions that are stored in 
the memory or memories to process data. This processing of data may be in response to 
commands by a user or users of the processing machine, in response to previous processing, in 
response to a request by another processing machine and/or any other input, for example. 

[000114] As previously discussed, the processing machine used to implement the invention 
may be a general purpose computer. However, the processing machine described above may 
also utilize any of a wide variety of other technologies including a special purpose computer, a 
computer system including a microcomputer, mini-computer or mainframe for example, a 
programmed microprocessor, a micro-controller, a peripheral integrated circuit element, a CSIC 
(Customer Specific Integrated Circuit) or ASIC (Application Specific Integrated Circuit) or other 
integrated circuit, a logic circuit, a digital signal processor, a programmable logic device such as 
a FPGA, PLD, PLA or PAL, or any other device or arrangement of devices that is capable of 
implementing the steps of the process of the invention. 

[000115] It will be understood that in order to practice the method of the invention as described 

above, it is not necessary that the processors and/or the memories of the processing machine be 

physically located in the same geographical place. ,That is, each of the processors and the 

memories used in the invention may be located in geographically distinct locations and 

connected so as to communicate in any suitable manner. Additionally, It will be understood that 
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each of the processor and/or the memory may be composed of different physical pieces of 
equipment. Accordingly, it is not necessary that a processor be one single piece of equipment in 
one location and that the memory be another single piece of equipment in another location. That 
is, it is contemplated that the processor may be two pieces of equipment in two different physical 
locations. The two distinct pieces of equipment may be connected in any suitable manner. 
Additionally, the memory may include two or more portions of memory in two or more physical 
locations. 

[000116] To explain further, processing as described above is performed by various 
components and various memories. However, It will be understood that the processing 
performed by two distinct components as described above may, in accordance with a further 
embodiment of the invention, be performed by a single component. Further, the processing 
performed by one distinct component as described above may be performed by two distinct L 
components. In a similar manner, the memory storage performed by two distinct memory 
portions as described above may, in accordance with a further embodiment of the invention, be 
performed by a single memory portion. Further, the memory storage performed by one distinct 
memory portion as described above may be performed by two memory portions. 

[000117] Further, various technologies may be used to provide communication between the — 
various processors and/or memories, as well as to allow the processors and/or the memories of ^ 
the invention to communicate with any other entity; i.e., so as to obtain further instructions or to 
access and use remote memory stores, for example. Such technologies used to provide such 
communication might include a network, the Internet, Intranet, Extranet, LAN, an Ethernet, or 
any client server system that provides communication, for example. Such communications 
technologies may use any suitable protocol such as TCP/IP, HTTP, UDP, OSI, SOAP, or any 
other messaging protocol. 

[000118] As described above, a set of instructions is used in the processing of the invention. 
The set of instructions may be in the form of a program or software. The software may be in the 
form of system software or application software, for example. The software might also be in the 
form of a collection of separate programs, a program module within a larger program, or a 
portion of a program module, for example The software used might also include modular 
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programming in the form of object oriented programming. The software tells the processing 
machine what to do with the data being processed. 

[000119] It will be understood that the instructions or set of instructions used in the 
implementation and operation of the invention may be in a suitable form such that the processing 
machine may read the instructions. For example, the instructions that form a program may be in 
the form of a suitable programming language, which is converted to machine language or object 
code to allow the processor or processors to read the instructions. That is, written lines of 
programming code or source code, in a particular programming language, are converted to 
machine language using a compiler, assembler or interpreter. The machine language is binary 
coded machine instructions that are specific to a particular type of processing machine, Le., to a 
particular type of computer, for example. The computer understands the machine language. 

[000120] Any suitable programming language may be used in accordance with the various 
embodiments of the invention. Illustratively, the programming language used may include 
assembly language, Ada, APL, Basic, C, C++, COBOL, dBase, Forth, Fortran, Java, Modula-2, 
Pascal, Prolog, REXX, Visual Basic, any .NET language, and/or JavaScript, for example. 
Further, it is not necessary that a single type of instructions or single programming language be 
utilized in conjunction with the operation of the system and method of the invention. Rather, any 
number of different programming languages may be utilized as is necessary or desirable. 

[000121] Also, the instructions and/or data used in the practice of the invention may utilize any 
compression or encryption technique or algorithm, as may be desired. An encryption module 
might be used to encrypt data. Further, files or other data may be decrypted using a suitable 
decryption module, for example. 

[000122] As described above, the invention may illustratively be embodied in the form of a 
processing machine, including a computer or computer system, for example, that includes at least 
one memory. It is to be appreciated that the set of instructions, i.e., the software for example, 
that enables the computer operating system to perform the operations described above may be 
contained on any of a wide variety of media or medium, as desired. Further, the data that is 
processed by the set of instructions might also be contained on any of a wide variety of media or 
medium. That is, the particular medium, i.e., the memory in the processing machine, utilized to 
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hold the set of instructions and/or the data used in the invention may take on any of a variety of 
physical forms or transmissions, for example. Illustratively, the medium may be in the form of 
paper, paper transparencies, a compact disk, a DVD, an integrated circuit, a hard disk, a floppy 
disk, an optical disk, a magnetic tape, a RAM, a ROM, a PROM, a EPROM, a wire, a cable, a 
fiber, communications channel, a satellite transmissions or other remote transmission, as well as 
any other medium or source of data that may be read by the processors of the invention. 

[000123] Further, the memory or memories used in the processing machine that implements the 
invention may be in any of a wide variety of forms to allow the memory to hold instructions, 
data, or other information, as is desired. Thus, the memory might be in the form of a database to 
hold data. The database might use any desired arrangement of files such as a flat file 
arrangement or a relational database arrangement, for example. 

[000124] In the system and method of the invention, a variety of "user interfaces" may be 
utilized to allow a user to interface with the processing machine or machines that are used to 
implement the invention. As used herein, a user interface includes any hardware, software, or 
combination of hardware and software used by the processing machine that allows a user to 
interact with the processing machine. A user interface may be in the form of a dialogue screen 
for example. A user interface may also include any of a mouse, touch screen, keyboard, voices 
reader, voice recognizer, dialogue screen, menu box, list, checkbox, toggle switch, a pushbutton 
or any other device that allows a user to receive information regarding the operation of the 
processing machine as it processes a set of instructions and/or provide the processing machine 
with information. Accordingly, the user interface is any device that provides communication 
between a user and a processing machine. The information provided by the user to the 
processing machine through the user interface may be in the form of a command, a selection of 
data, or some other input, for example. 

[000125] As discussed above, a user interface is utilized by the processing machine that 

performs a set of instructions such that the processing machine processes data for a user. The 

user interface is typically used by the processing machine for interacting with a user either to 

convey information or receive information from the user. However, it should be appreciated that 

in accordance with some embodiments of the system and method of the invention, it is not 

necessary that a human user actually interact with a user interface used by the processing 
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machine of the invention. Rather, it is contemplated that the user interface of the invention 
might interact, i.e., convey and receive information, with another processing machine, rather than 
a human user. Accordingly, the other processing machine might be characterized as a user. 
Further, it is contemplated that a user interface utilized in the system and method of the invention 
may interact partially with another processing machine or processing machines, while also 
interacting partially with a human user. 

[000126] It will be readily understood by those persons skilled in the art that the present 
invention is susceptible to broad utility and application. Many embodiments and adaptations of 
the present invention other than those herein described, as well as many variations, modifications 
and equivalent arrangements, will be apparent from or reasonably suggested by the present 
invention and foregoing description thereof, without departing from the substance or scope of the 
invention. 

[000127] While the foregoing illustrates and describes exemplary embodiments of this 
invention, it is to be understood that the invention is not limited to the construction disclosed 
herein. The invention can be embodied in other specific forms without departing from the spirit 
or essential attributes. 
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CLAIMS 

What is claimed is: 

L An automated method of producing an encoded image for use in authenticating a printed 
version of a digital document, the method comprising: 

establishing at least one digitized authentication image; 

receiving at least one user-supplied encoding parameter; 

determining at least one non-user-supplied encoding parameter, 

establishing a first encoding parameter set including the at least one user-supplied 

encoding parameter and the at least one non-user-supplied encoding parameter, 

the first encoding parameter set being usable to encode one or more of the at least 

one digitized authentication image; and 
encoding one or more of the at least one digitized authentication image using the first 

encoding parameter set to produce a final encoded image. . ^ 

2. An automated method according to claim 1 further comprising: 

embedding the final encoded image into the digital document. 

3. An automated method according to claim 2 further comprising: 

printing the digital document with the final encoded image embedded therein. 

4. An automated method according to claim 1 wherein the at least one user-supplied encoding 
parameter includes one or more encoding parameters from a set consisting of a decoding angle 
relative to a first reference frame associated with the digital document, an authentication image 
angle relative to a second reference frame associated with the digital document, an authentication 
image repetition frequency and a rasterization frequency. 

5. An automated method according to claim 1 wherein the action of establishing at least one 
digitized authentication image includes receiving authentication indicia. 
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6. An automated method according to claim 5 wherein the action of establishing at least one 
digitized authentication image further includes 

determining whether the authentication indicia includes data in a non-image format; 
responsive to a determination that the user-supplied authentication indicia includes data 
in a non-image format, rendering such data into an image format for incorporation 
into the at least one digitized authentication image. 

7* An automated method according to claim 5 wherein at least a portion of the authentication 
indicia is user-supplied authentication indicia. 

8. An automated method according to claim 7 wherein the user-supplied authentication indicia 
comprises user-defined text. 

9. An automated method according to claim 5 wherein at least a first portion of the 
authentication indicia is user-supplied authentication indicia and a second portion of the 
authentication indicia are non-user-supplied authentication indicia. 

10. An automated method according to claim 1 wherein the at least one digitized authentication 
image includes a first authentication image and a second authentication image and the action of 
encoding includes 

producing a first encoded image using the first authentication image; 
producing a second encoded image using the second authentication image; and 
producing the final encoded image by combining the first and second encoded images. 

11. An automated method according to claim 10 wherein the first authentication image is based 
on user-supplied indicia and the second authentication image is based on non-user-supplied 
indicia. 

12. An automated method according to claim 10 further comprising: 

establishing a second encoding parameter set including only non-user-supplied encoding 
parameters, and 
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wherein the first authentication image is encoded using the first encoding parameter set 
and the second authentication image is encoded using the second encoding 
parameter set. 

13. An automated method according to claim 1 wherein the at least one digitized authentication 
image includes a first authentication image and a second authentication image and the action of 
encoding includes 

producing the final encoded image by simultaneously encoding the first and second 
authentication images. 

14. An automated method according to claim 13 wherein the first authentication image is based 
on user-supplied indicia and the second authentication image is based on non-user-supplied 
indicia. 

15. An automated method according to claim 13 further comprising: 

establishing a second encoding parameter set including only non-user-supplied encoding 
parameters, and 

wherein the first authentication image is encoded using the first encoding parameter set and the 
second authentication image is encoded using the second encoding parameter set. 

16. An automated method according to claim 1 further comprising 

establishing a second encoding parameter set including only non-user-supplied encoding 

parameters, and 
> ! wherein the action of encoding includes: 

producing a first encoded image from a single authentication image selected from the at 

least one authentication image using the first encoding parameter set; 
producing a second encoded image from the single authentication image using the 

second encoding parameter set; and 
producing the final encoded image by combining the first and second encoded images. 

17. An automated method according to claim 1 further comprising 

establishing a second encoding parameter set including only non-user-supplied encoding 
parameters, and 
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wherein the action of encoding includes: 

producing the final encoded image directly from a single authentication image selected 
from the at least one authentication image, the first encoding parameter set being 
used to form a first portion of the final encoded image and the second encoding 
parameter set being used to form a second portion of the final encoded image. 

18. An automated method according to claim 1 wherein the action of establishing an encoding 
parameter set includes: 

receiving the at least one user-supplied encoding parameter from a user via a user 
interface. 

19. An automated method according to claim 1 wherein action of establishing an encoding 
parameter set includes: 

identifying a document processing circumstance; 

establishing at least one of the at least one non-user-supplied parameter using the 
document processing circumstance. 

20. An automated method according to claim 19 wherein the document generation circumstance 
is one of a document processing time, a document processing date, a processing machine 
identifier and an operator identifier. 

21. An automated method according to claim 20 wherein the action of identifying a document 
generation circumstance includes: 

receiving data associated with the document generation circumstance from an 
authentication control device. 

22. An automated method according to claim 20 wherein the document processing circumstance 
is associated with a processing of the digital document on a user data processor and wherein the 
action of identifying a document generation circumstance includes: 

obtaining data associated with the processing of the digital document from the user data 
processor. 
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23. An automated method according to claim 22 wherein the data associated with the processing 
of the digital document includes data processing environment information. 

24. An automated method according to claim 22 wherein the data associated with the processing 
of the digital document includes content taken from the digital document. 

25. An automated method according to claim 20 wherein the document generation circumstance 
includes a unique identifier associable with the printed document, and wherein the action of 
identifying a document processing circumstance includes determining the unique identifier. 

26. An automated method according to claim 25 wherein the unique identifier is a randomly 
determined value. 

27. An automated method according to claim 25 wherein the unique identifier is a systematically 
computed value. 

28. An automated method according to claim 1 wherein the action of establishing at least one 
digitized authentication image includes: 

identifying a document processing circumstance; 

determining non-user-supplied authentication indicia using the document processing 
circumstance; and 

incorporating the non-user-supplied authentication indicia into at least one of the at least 
one digitized authentication image. 

29. An automated method according to claim 28 wherein the document generation circumstance 
is one of a document processing time, a document processing date, a processing machine 
identifier and an operator identifier. 

30. An automated method according to claim 28 wherein the action of identifying a document 
generation circumstance includes: 

receiving data associated with the document generation circumstance from an 
authentication control device. 
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31. An automated method according to claim 28 wherein the document processing circumstance 
is associated with a processing of the digital document on a user data processor and wherein the 
action of identifying a document generation circumstance includes: 

obtaining data associated with the processing of the digital document from the user data 
processor. 

32. An automated method according to claim 31 wherein the data associated with the processing 
of the digital document includes data processing environment information. 

33. An automated method according to claim 31 wherein the data associated with the processing 
of the digital document includes content taken from the digital document. 

34. An automated method according to claim 28 wherein the document generation circumstance 
includes a unique identifier associable with the printed document, and wherein the action of 
identifying a document processing circumstance includes determining the unique identifier. 

35. An automated method according to claim 34 wherein the unique identifier is a randomly 
determined value. 

36. An automated method according to claim 34 wherein the unique identifier is a systematically 
computed value. 

37. An automated method according to claim 1 wherein three or more authentication images are 
encoded to produce the final encoded image 

38. An automated method of producing an encoded image for use in authenticating a printed 
version of a digital document, the method comprising: 

establishing a first digitized authentication image based on first authentication indicia; 
establishing a second digitized authentication image based on second authentication 
indicia; 

receiving at least one user-supplied encoding parameter; 
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establishing a first encoding parameter set including the at least one user-supplied 

encoding parameter, the first encoding parameter set being usable to encode the 
first authentication image; 

establishing a second encoding parameter set including at least one non-user-supplied 
encoding parameter; and 

producing a final encoded image from the first and second authentication images using 
the first and second encoding parameter sets, the final encoded image being 
decodable to view each of the first and second authentication images. 

39. An automated method according to claim 38 further comprising: 

embedding the final encoded image into the digital document 

40. An automated method according to claim 39 further comprising: 

printing the digital document with the final encoded image embedded therein. 

41. An automated method according to claim 38 wherein the at least one user-supplied encoding 
parameter includes one or more encoding parameters from a set consisting of a decoding angle 
relative to a first reference frame associated with the digital document, an authentication image 
angle relative to a second reference frame associated with the digital document, an authentication 
image repetition frequency and a rasterization frequency. 

42. An automated method according to claim 38 wherein at least a portion of the first 
authentication indicia is user-supplied authentication indicia. 

43. An automated method according to claim 40 wherein the user-supplied authentication 
indicia comprises user-defined text. 

44. An automated method according to claim 38 wherein at least a portion of the second 
authentication indicia is non-user-supplied authentication indicia. 

45. An automated method according to claim 38 wherein the action of producing a final encoded 
image includes 
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encoding the first authentication image using the first encoding parameter set to produce 

a first encoded image; 
encoding the second authentication image using the second encoding parameter set to 

produce a second encoded image; and 
producing the final encoded image by combining the first and second encoded images. 

46. An automated method according to claim 38 wherein the action of producing a final encoded 
image includes 

simultaneously encoding the first and second authentication images using the first and 
second encoding parameter sets to produce the final encoded image. 

47. An automated method according to claim 38 wherein action of establishing a second 
encoding parameter set includes: 

identifying a document processing circumstance; 

establishing at least one of the at least one non-user-supplied parameter using the 
document processing circumstance. 

48. An automated method according to claim 47 wherein the document generation circumstance 
is one of a document processing time, a document processing date, a processing machine 
identifier and an operator identifier. 

49. An automated method according to claim 47 wherein the action of identifying a document 
generation circumstance includes: 

receiving data associated with the document generation circumstance from an 
authentication control device. 

50. An automated method according to claim 47 wherein the document processing circumstance 

is associated with a processing of the digital document on a user data processor 
and wherein the action of identifying a document generation circumstance 
includes: 

obtaining data associated with the processing of the digital document from the user data 
processor. 
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51. An automated method according to claim 50 wherein the data associated with the processing 
of the digital document includes data processing environment information. 

52. An automated method according to claim 50 wherein the data associated with the processing 
of the digital document includes content taken from the digital document. 

53. An automated method according to claim 47 wherein the document generation circumstance 
includes a unique identifier associable with the printed document, and wherein the action of 
identifying a document processing circumstance includes determining the unique identifier. 

54. An automated method according to claim 53 wherein the unique identifier is a randomly 
determined value. 

55. An automated method according to claim 53 wherein the unique identifier is a systematically 
computed value. 

56. An automated method according to claim 38 wherein the action of establishing a second 
digitized authentication image includes: 

identifying a document processing circumstance; 

determining non-user-supplied authentication indicia using the document processing ^ 
circumstance; and 

incorporating the non-user-supplied authentication indicia into the second authentication 
indicia. 

57. An automated method according to claim 56 wherein the document generation circumstance 
is one of a document processing time, a document processing date, a processing machine 
identifier and an operator identifier. 

58. An automated method according to claim 56 wherein the action of identifying a document 
generation circumstance includes: 

receiving data associated with the document generation circumstance from an 
authentication control device. 
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59. An automated method according to claim 56 wherein the document processing circumstance 
is associated with a processing of the digital document on a user data processor and wherein the 
action of identifying a document generation circumstance includes: 

obtaining data associated with the processing of the digital document from the user data 
processor. 

60. An automated method according to claim 59 wherein the data associated with the processing 
of the digital document includes data processing environment information. 

61. An automated method according to claim 59 wherein the data associated with the processing 
of the digital document includes content taken from the digital document. 

62. An automated method according to claim 56 wherein the document generation circumstance 
includes a unique identifier associable with the printed document, and wherein the action of 
identifying a document processing circumstance includes detemuning the unique identifier. 

63. An automated method according to claim 62 wherein the unique identifier is a randomly 
determined value. 

64. An automated method according to claim 62 wherein the unique identifier is a systematically 
computed value. 

65. An authenticable printed document comprising: 

a base member having at least one printable surface; 

a printed version of a digital document printed on one of the at least one printable 
surface; and 

an encoded image embedded in the printed version of the digital document, the encoded 
image having characteristics derived from at least one authentication image, at 
least one user-supplied encoding parameter and at least one non-user-supplied 
encoding parameter, the encoded image being decodable to view the at least one 
authentication image. 
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66. An automated system for incorporating encoded images into a digital document, the system 
comprising: 

a user interface; 
a printer; 

a data processor in communication with the user interface and the printer, the data 
processor including 

an authentication image module adapted to produce digitized authentication 

images from user-supplied and non-user-supplied authentication indicia; 

an encoding parameter module adapted to receive user-supplied encoding 
parameters, determine non-user-supplied encoding parameters, and 
assemble the user-supplied and non-user-supplied encoding parameters 
into encoding parameter sets for use in encoding digitized authentication 
images; 

an encoding module adapted to construct encoded images using the encoding 
parameter sets and the digitized authentication images; and 

an embedding module adapted for incorporating the encoded image into the 
digital document. 

67. An automated system according to claim 66 wherein the user interface is adapted for 
receiving at least one of user-supplied authentication indicia and user-supplied encoding 
parameters. 

68. An automated system according to claim 66 further comprising: 

an authentication control device in communication with the data processor, the 
authentication control device being adapted to provide data relating to a 
processing circumstance for use in determining a non-user-supplied encoding 
parameter. 

69. An automated system according to claim 68 wherein the authentication control device is 
adapted to control the use of authentication software by the data processor. 
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70. A computer-readable medium having stored thereon computer-executable instructions for: 

establishing at least one digitized authentication image; 

receiving at least one user-supplied encoding parameter; 

determining at least one non-user-supplied encoding parameter; 

establishing a first encoding parameter set including the at least one user-supplied 

encoding parameter and the at least one non-user-supplied encoding parameter, 

the first encoding parameter set being usable to encode one or more of the at least 

one digitized authentication image; and 
encoding one or more of the at least one digitized authentication image using the first 

encoding parameter set to produce a final encoded image. 

71. A computer-readable medium according to claim 67 further having stored thereon computer- 
executable instructions for: 

embedding the final encoded image into the digital document. 

72. A computer-readable medium having stored thereon computer-executable instructions for: 

establishing a first digitized authentication image based on first authentication indicia; 
establishing a second digitized authentication image based on second authentication 
indicia; 

receiving at least one user-supplied encoding parameter; 

establishing a first encoding parameter set including the at least one user-supplied 

encoding parameter, the first encoding parameter set being usable to encode the 
first authentication image; 

establishing a second encoding parameter set including at least one non-user-supplied 
encoding parameter; and 

producing a final encoded image from the first and second authentication images using 
the first and second encoding parameter sets, the final encoded image being 
decodable to view each of the first and second authentication images. 

73. A computer-readable medium according to claim 69 further having stored thereon computer- 
executable instructions for: 

embedding the final encoded image into the digital document. 
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